CVE-2017-3048

Technical details for CVE-2017-3048 are not publicly provided in the supplied documents. Please monitor for updates.

USN-3048-1 curl vulnerability | Cloud Foundry

USN-3048-1 curl vulnerability Medium Vendor Canonical Ubuntu, curl Versions Affected Canonical Ubuntu 14.04 LTS Description Bru Rom discovered that curl incorrectly handled client certificates when resuming a TLS session. CVE-2016-5419 It was discovered that curl incorrectly handled client...

Ubuntu 14.04 LTS / 16.04 LTS : curl vulnerabilities (USN-3048-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3048-1 advisory. Bru Rom discovered that curl incorrectly handled client certificates when resuming a TLS session. CVE-2016-5419 It was discovered that curl...

Oracle: Security Advisory (ELSA-2012-0523)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2015-3048)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2012-68)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3048)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3048 advisory. - ipv6: Don't reduce hop limit for an interface D.S. Ljungmark Orabug: 21444790 CVE-2015-2922 Tenable has extracted the preceding description block...

Adobe Reader Multiple Vulnerabilities - 01 (May 2015) - Mac OS X

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

Adobe Reader < 10.1.14 / 11.0.11 Multiple Vulnerabilities (APSB15-10)

The version of Adobe Reader installed on the remote host is a version prior to 10.1.14 / 11.0.11. It is, therefore, affected by the following vulnerabilities : - A buffer overflow condition exists in CoolType.dll due to improper validation of user-supplied input. A remote attacker can exploit thi...

CVE-2015-3048

Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbitrary code via unknown vectors...

CVE-2015-3048

Adobe Reader/Acrobat is affected by multiple vulnerabilities, including CVE-2015-3048, described under APSB15-10. The impact is a buffer overflow/memory corruption that can lead to arbitrary code execution when processing PDF content. Affected products include Adobe Reader/Acrobat on Windows and ...

Debian DSA-3048-1 : apt - security update

Guillem Jover discovered that the changelog retrieval functionality in apt-get used temporary files in an insecure way, allowing a local user to cause arbitrary files to be overwritten. This vulnerability is neutralized by the fs.protectedsymlinks setting in the Linux kernel, which is enabled by...

Debian Security Advisory DSA 3048-1 (apt - security update)

Guillem Jover discovered that the changelog retrieval functionality in apt-get used temporary files in an insecure way, allowing a local user to cause arbitrary files to be overwritten. This vulnerability is neutralized by the fs.protectedsymlinks setting in the Linux kernel, which is enabled by...

Debian: Security Advisory (DSA-3048-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2014-3048)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3048 advisory. - l2tp: fix an unprivileged user to kernel privilege escalation Sasha Levin Orabug: 19229529 CVE-2014-4943 CVE-2014-4943 Tenable has extracted the...

openSUSE Security Update : libpng (openSUSE-SU-2012:0491-1)

specially crafted png files could cause a memory corruption in libpng's pngsettext2 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-217. The text description of this plugin is C...

CVE-2014-3048

IBM System Storage TS7700 Virtualization Engine (3957‑V06, 3957‑V07, 3957‑VEA, 3957‑VEB) contains a local‑privilege escalation vulnerability (CVE‑2014‑3048) where unprivileged users may invoke privileged SSH commands via the TSSC service user, potentially gaining full administrative access. The I...

CVE-2014-3048

Unspecified vulnerability on the IBM System Storage Virtualization Engine TS7700 allows local users to gain privileges by leveraging the TSSC service-user role to enter a crafted SSH command...

CVE-2013-3048

CVE-2013-3048 is an XSS vulnerability in IBM Maximo Asset Management and related Maximo products across multiple releases (6.2.x to 7.5). The issue allows remote authenticated users to inject arbitrary web script/HTML via unspecified vectors due to a cross-site scripting flaw. IBM’s bulletin list...

Amazon Linux AMI : libpng (ALAS-2012-68)

A heap-based buffer overflow flaw was found in the way libpng processed tEXt chunks in PNG image files. An attacker could create a specially crafted PNG image file that, when opened, could cause an application using libpng to crash or, possibly, execute arbitrary code with the privileges of the...